Knox: privacy-preserving auditing for shared data with large groups in the cloud

Authors:
Boyang Wang;Baochun Li;Hui Li
Affiliations:
State Key Laboratory of Integrated Services Networks, Xidian University, China, Department of Electrical and Computer Engineering, University of Toronto, Canada;Department of Electrical and Computer Engineering, University of Toronto, Canada;State Key Laboratory of Integrated Services Networks, Xidian University, China
Venue:
ACNS'12 Proceedings of the 10th international conference on Applied Cryptography and Network Security
Year:
2012

Citing 20
Cited 1

Short Signatures from the Weil Pairing

ASIACRYPT '01 Proceedings of the 7th International Conference on the Theory and Application of Cryptology and Information Security: Advances in Cryptology
A Practical and Provably Secure Coalition-Resistant Group Signature Scheme

CRYPTO '00 Proceedings of the 20th Annual International Cryptology Conference on Advances in Cryptology
Pors: proofs of retrievability for large files

Proceedings of the 14th ACM conference on Computer and communications security
Provable data possession at untrusted stores

Proceedings of the 14th ACM conference on Computer and communications security
Scalable and efficient provable data possession

Proceedings of the 4th international conference on Security and privacy in communication netowrks
Compact Proofs of Retrievability

ASIACRYPT '08 Proceedings of the 14th International Conference on the Theory and Application of Cryptology and Information Security: Advances in Cryptology
Practical Short Signature Batch Verification

CT-RSA '09 Proceedings of the The Cryptographers' Track at the RSA Conference 2009 on Topics in Cryptology
Homomorphic MACs: MAC-Based Integrity for Network Coding

ACNS '09 Proceedings of the 7th International Conference on Applied Cryptography and Network Security
Dynamic provable data possession

Proceedings of the 16th ACM conference on Computer and communications security
A view of cloud computing

Communications of the ACM
Group signatures

EUROCRYPT'91 Proceedings of the 10th annual international conference on Theory and application of cryptographic techniques
Aggregate and verifiably encrypted signatures from bilinear maps

EUROCRYPT'03 Proceedings of the 22nd international conference on Theory and applications of cryptographic techniques
Enabling public verifiability and data dynamics for storage security in cloud computing

ESORICS'09 Proceedings of the 14th European conference on Research in computer security
Privacy-preserving public auditing for data storage security in cloud computing

INFOCOM'10 Proceedings of the 29th conference on Information communications
Achieving secure, scalable, and fine-grained data access control in cloud computing

INFOCOM'10 Proceedings of the 29th conference on Information communications
Dynamic audit services for integrity verification of outsourced storages in clouds

Proceedings of the 2011 ACM Symposium on Applied Computing
Homomorphic signatures for polynomial functions

EUROCRYPT'11 Proceedings of the 30th Annual international conference on Theory and applications of cryptographic techniques: advances in cryptology
A Privacy-Preserving Remote Data Integrity Checking Protocol with Data Dynamics and Public Verifiability

IEEE Transactions on Knowledge and Data Engineering
Efficient audit service outsourcing for data integrity in clouds

Journal of Systems and Software
Data storage auditing service in cloud computing: challenges, methods and opportunities

World Wide Web

On the security of auditing mechanisms for secure cloud storage

Future Generation Computer Systems

Quantified Score

Hi-index	0.00

Visualization

Abstract

With cloud computing and storage services, data is not only stored in the cloud, but routinely shared among a large number of users in a group. It remains elusive, however, to design an efficient mechanism to audit the integrity of such shared data, while still preserving identity privacy. In this paper, we propose Knox, a privacy-preserving auditing mechanism for data stored in the cloud and shared among a large number of users in a group. In particular, we utilize group signatures to construct homomorphic authenticators, so that a third party auditor (TPA) is able to verify the integrity of shared data for users without retrieving the entire data. Meanwhile, the identity of the signer on each block in shared data is kept private from the TPA. With Knox, the amount of information used for verification, as well as the time it takes to audit with it, are not affected by the number of users in the group. In addition, Knox exploits homomorphic MACs to reduce the space used to store such verification information. Our experimental results show that Knox is able to efficiently audit the correctness of data, shared among a large number of users.